Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4wcD_KTOjvRKjUOdTx4jXGIb4jc.roa
File: 4wcD_KTOjvRKjUOdTx4jXGIb4jc.roa (raw, json)
Hash identifier: zP8z9k4rOBU5H1u70VFqo2bFmNlP17omg2lZzy6TQDA=
Subject key identifier: E3:07:03:FC:A4:CE:8E:F4:4A:8D:43:9D:4F:1E:23:5C:62:1B:E2:37
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A121EDBFE3AD2795E57F38774363C9F80
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4wcD_KTOjvRKjUOdTx4jXGIb4jc.roa
Signing time: Thu 23 Oct 2025 17:30:03 +0000
ROA not before: Thu 23 Oct 2025 17:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202736
IP address blocks: 212.134.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:1e:db:fe:3a:d2:79:5e:57:f3:87:74:36:3c:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 23 17:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e30703fca4ce8ef44a8d439d4f1e235c621be237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:a6:14:02:e2:7e:8f:ef:a0:7d:4e:59:e9:
58:46:5d:3f:95:5a:98:4c:8c:07:86:37:27:a2:3b:
5d:34:bd:0a:c4:fe:3e:18:70:44:f3:7d:cd:86:70:
2b:a8:09:fb:b5:ce:b2:48:ce:a6:78:bb:2b:a7:be:
a8:6c:20:af:64:83:36:7a:21:78:68:22:85:a4:c1:
2b:37:44:01:cd:64:58:f0:74:b0:42:c7:15:2b:f8:
be:a4:6b:98:b0:b7:4f:9c:bd:2c:42:49:91:a4:6e:
84:2f:a6:28:9f:ff:2b:cb:91:c5:44:2b:c5:98:a7:
7e:12:7b:bc:99:4f:b9:a6:19:a6:5a:0c:6e:54:52:
99:3d:f2:0f:f7:f0:13:3e:78:a7:88:05:69:63:4e:
fc:b5:01:85:c1:31:45:8b:dd:f6:6a:cc:42:1e:92:
1d:86:b3:51:96:14:18:a2:1a:70:62:dd:b7:12:7a:
2b:6c:a2:b3:f1:e1:8e:8e:fd:f9:c3:6b:a3:0e:2d:
b4:ad:e9:60:5b:00:a4:2c:12:d3:db:3e:dd:03:46:
3b:f2:60:1c:bf:3c:bb:37:9e:3b:d7:a1:7b:90:2c:
67:50:5a:32:04:2d:5f:5c:a1:3d:fd:96:ff:c7:f7:
c1:f0:29:f1:88:16:a5:28:8c:d5:55:59:53:a9:d7:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:07:03:FC:A4:CE:8E:F4:4A:8D:43:9D:4F:1E:23:5C:62:1B:E2:37
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4wcD_KTOjvRKjUOdTx4jXGIb4jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.178.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c7:19:8c:ca:f5:4a:99:08:14:02:43:dd:7c:40:59:b1:cd:
09:fc:a5:f4:5c:41:0a:5a:b9:21:02:d3:d6:72:15:32:5e:6d:
e9:49:10:3b:ae:74:3d:26:a2:d3:18:ee:49:dc:6c:e7:16:db:
28:82:6a:ec:14:d8:b6:bd:94:6f:61:1e:5f:7c:2d:a2:64:69:
56:60:d2:a3:3e:95:40:cd:81:90:d4:20:94:ae:1f:ca:01:23:
95:21:25:53:fb:da:0d:f5:4e:ae:7c:20:ff:f4:10:97:e7:30:
21:2d:21:e4:e5:ba:9e:65:8c:4a:4d:d1:0e:a6:de:d4:0d:00:
09:f7:05:34:9e:24:53:4b:64:75:45:47:9e:b3:c4:09:94:46:
d2:6c:88:06:42:c3:0f:66:02:17:73:ef:05:02:cf:f1:15:00:
a6:cb:06:e7:a3:c8:7a:4a:ab:e9:c1:d0:50:0e:8e:f0:66:56:
d1:a0:3b:0a:f8:98:33:be:6a:7e:55:ac:99:4f:0c:b3:f8:ba:
95:4a:b6:d8:99:cb:ad:13:65:d7:75:db:aa:38:e2:c4:1a:24:
9a:cc:0a:d3:51:db:6c:a5:93:d2:7f:87:75:61:ff:f6:67:f5:
56:9d:f4:d3:d3:10:00:f1:30:54:1a:32:41:0a:ad:13:97:86:
71:e7:89:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoSHtv+OtJ5Xlfzh3Q2PJ+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMDIzMTczMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzA3MDNmY2E0Y2U4ZWY0NGE4ZDQzOWQ0ZjFlMjM1YzYyMWJlMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkqmFALifo/voH1OWelYRl0/lVqY
TIwHhjcnojtdNL0KxP4+GHBE833NhnArqAn7tc6ySM6meLsrp76obCCvZIM2eiF4
aCKFpMErN0QBzWRY8HSwQscVK/i+pGuYsLdPnL0sQkmRpG6EL6Yon/8ry5HFRCvF
mKd+Enu8mU+5phmmWgxuVFKZPfIP9/ATPniniAVpY078tQGFwTFFi932asxCHpId
hrNRlhQYohpwYt23EnorbKKz8eGOjv35w2ujDi20relgWwCkLBLT2z7dA0Y78mAc
vzy7N54716F7kCxnUFoyBC1fXKE9/Zb/x/fB8CnxiBalKIzVVVlTqdfGEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMHA/ykzo70So1DnU8eI1xiG+I3MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvNHdjRF9LVE9qdlJLalVPZFR4NGpYR0liNGpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IayMA0G
CSqGSIb3DQEBCwUAA4IBAQA5xxmMyvVKmQgUAkPdfEBZsc0J/KX0XEEKWrkhAtPW
chUyXm3pSRA7rnQ9JqLTGO5J3GznFtsogmrsFNi2vZRvYR5ffC2iZGlWYNKjPpVA
zYGQ1CCUrh/KASOVISVT+9oN9U6ufCD/9BCX5zAhLSHk5bqeZYxKTdEOpt7UDQAJ
9wU0niRTS2R1RUees8QJlEbSbIgGQsMPZgIXc+8FAs/xFQCmywbno8h6SqvpwdBQ
Do7wZlbRoDsK+Jgzvmp+VayZTwyz+LqVSrbYmcutE2XXdduqOOLEGiSazArTUdts
pZPSf4d1Yf/2Z/VWnfTT0xAA8TBUGjJBCq0Tl4Zx54n9
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:20 2025 by rpki-client